Privacy Policy

1. Introduction

A Neogenomic Genomic Analysis Ltd., inscrita no CNPJ sob o nº 54.631.214/0001- 95, com sede na Rua Frei Matias Tevis, 285, Sala 1401, Graham Bell Business, Recife – PE, tem como compromisso a proteção da privacidade e dos dados pessoais de seus clientes, patients, partners e usuários.

Esta Privacy Policy descreve como coletamos, utilizamos, armazenamos, compartilhamos e protegemos dados pessoais, em conformidade com a Lei Geral de Proteção de Dados Pessoais (Lei nº 13.709/2018 – LGPD) e demais normas aplicáveis ao setor de saúde e diagnóstico clínico.

2. Who We Are

• • Corporate reason: Neogenomic Genomic Analysis Ltd.
• CNPJ: 54.631.214/0001-95
• • Registration Status: Active
• • Address: Rua Frei Matias Tevis, 285, Room 1401, Empresarial Graham Bell, Recife - PE
• Main Activity: Clinical laboratories (CNAE 8640-2/02)

3. Personal Data Collected

We may collect different categories of personal data, including:

4. Purposes of Data Processing

Personal data is processed for legitimate and specific purposes, such as:

• • Carrying out laboratory and genomic tests
• • Issuance of reports and technical reports
• • Provision of diagnostic support services
• • Communication with patients, doctors and partners
• • Compliance with legal and regulatory obligations
• • Billing and administrative processes
• • Scientific and statistical research (where applicable, with anonymization or consent)
• • Continuous improvement of services and systems

5. Legal Bases Used

The processing of personal data by Neogenomics may occur based on:

• • Consent of the holder
• • Execution of contract or preliminary procedures
• • Compliance with legal or regulatory obligation
• • Regular exercise of rights
• • Protection of life or physical safety
• • Health protection
• • Legitimate interest, when applicable

Sensitive health and genetic data are processed especially for health protection, provision of laboratory services and compliance with health standards.

6. Data Sharing

Data may be shared, when necessary, with:

• • Requesting doctors
• • Partner hospitals and clinics
• • Health operators and agreements
• • Support laboratories
• • Cloud technology, processing and storage providers
• • Regulatory bodies and public authorities

As a laboratory specializing in genetic tests, a Neogenomics poderá compartilhar dados com partners tecnológicos apenas quando necessário para viabilizar as análises laboratoriais, armazenamento insurance de informações e emissão de resultados.

All sharing is carried out confidentially and following appropriate data protection standards.

7. Storage and Retention

Personal and genetic data are stored in safe, controlled environments with a high level of technological protection.

We use services from cloud computing from recognized providers on the market, such as Amazon Web Services (AWS) and Google Cloud, for storing and processing genetic data.

These environments follow high security standards, ensuring protection, confidentiality and availability of information.

8. Information Security

We adopt technical and administrative measures to protect personal data and especially genetic data, including:

• • Restricted access control
• • Data encryption
• • Systems monitoring
• • Internal security policies
• • Employee training

We also use security features available from cloud providers to ensure information is protected.

Despite the measures adopted, no system is completely risk-free, but we follow the best practices applicable to the healthcare sector.

9. Data Subject Rights

Under the LGPD, the holder may request:

• • Confirmation of treatment
• • Access to data
• • Correction of incomplete or outdated data
• • Anonymization, blocking or deletion
• • Data portability
• • Revocation of consent
• • Information about shares

Requests will be responded to within the legal deadlines.

10. Cookies and Tracking Technologies

We use cookies to:

• • User authentication
• • Systems security
• • Platform usage analysis
• • Experience improvement

The user can manage cookies through the browser.

11. International Data Transfer

Due to the use of cloud computing services, international data transfer may occur, including for storage or processing on servers located outside Brazil.

Neogenomica ensures that these transfers occur in compliance with the LGPD, adopting appropriate contractual and security measures to protect data.

Whenever applicable, techniques to minimize or anonymize information will be used.

12. Updates to this Policy

This Policy may be updated at any time to reflect operational, technological or legal improvements.

The current version will always be available on Neogenomica's official channels.

13. Application NeoGenomica

O NeoGenomica application is intended for users with authorized access. In the context of the application, we may process account identification and contact data, professional data, access and device records, notification token and clinical, laboratory and genetic information made available according to the user's profile and permissions.

This information is used for authentication, access control, provision of reports and authorized content, operational communication, support and security. Notifications are optional and can be managed in your device settings. When the user enables the biometric lock, the verification occurs in the device's operating system itself; The application does not receive or store the user's image, fingerprint or biometric template.

Documents shared by the user are only forwarded by the express sharing action of the operating system. We do not sell personal data or use it for behavioral advertising. Original files received for clinical processing are kept for the applicable operational period, currently up to 90 days, while records, structured information and data necessary for legal, regulatory, welfare, contractual or audit obligations may be kept for the corresponding periods.